Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
File: iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft (raw, json)
Hash identifier: Dp2StLsXARYwDpNVrMbhLkYlraRLVXQA6klWwuTSMho=
Subject key identifier: B6:C2:4E:CE:54:91:B9:2A:BE:4F:18:63:31:30:A9:AE:2A:47:F7:50
Authority key identifier: 88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC
Certificate issuer: /CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
Certificate serial: 0199FDD95F7D1FF4C07318D4443B1FEF77EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
Manifest number: 0DB4
Signing time: Sun 19 Oct 2025 19:01:45 +0000
Manifest this update: Sun 19 Oct 2025 19:01:45 +0000
Manifest next update: Mon 20 Oct 2025 19:01:45 +0000
Files and hashes: 1: N-nPI1g49f7ETAzdIo5yjbOdZtM.roa (hash: qC00kLedLYSFjjH9iYQzP0HBmWb73ml/Yv/mqD1i4KU=)
2: fv0GFD_AZHwLWR5yvJcFyEMzZds.roa (hash: +P74mB+NlndUj38u1gR6So/MVR2zQW1aNy+V6Ba/PBg=)
3: iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl (hash: QmXhdvNsKO//+Fl8zU0snOVvAa6zJntPgTSx9p2/yVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:5f:7d:1f:f4:c0:73:18:d4:44:3b:1f:ef:77:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
Validity
Not Before: Oct 19 19:01:45 2025 GMT
Not After : Oct 20 19:01:45 2025 GMT
Subject: CN=b6c24ece5491b92abe4f18633130a9ae2a47f750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:49:71:25:75:75:ce:a0:46:54:ff:01:2c:e3:
37:3d:08:d4:a3:d5:e5:92:20:4e:f6:f6:c2:b2:5c:
f6:07:b2:da:75:97:c2:f5:7f:f8:2d:1f:64:73:e5:
a2:80:34:51:9b:b9:56:bf:be:37:75:87:04:ef:b5:
85:e2:63:77:9d:05:59:71:e3:bf:81:f0:96:8b:43:
90:f9:ad:7f:39:1b:94:ee:70:82:d1:b2:62:a1:4b:
b1:3f:d5:ce:6e:95:6b:7f:c7:d8:23:11:3b:49:f9:
3a:ad:08:bd:7f:27:51:a6:f3:69:55:32:a6:5f:25:
d5:3b:2e:e5:19:3b:d6:12:5b:03:03:94:17:79:ad:
39:31:2a:34:f8:63:ae:67:e3:25:fa:38:b5:83:ec:
54:23:58:b1:f0:e0:97:03:9a:a7:f4:6b:a6:22:e9:
a3:dd:d9:d4:c5:b6:23:6e:4e:42:f2:e9:16:eb:c0:
24:54:1e:8e:5d:55:13:c6:f1:13:0b:63:9b:53:c1:
ea:b5:db:ca:4b:d0:c3:f5:1e:da:6a:46:62:4b:14:
aa:f4:f1:49:9e:81:74:f6:38:2d:84:19:97:22:1f:
c1:60:3e:25:b1:7d:05:3f:6d:e3:7b:1f:fc:c3:61:
92:04:d8:64:7f:5b:a5:45:ca:94:6a:3d:44:aa:e1:
a9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C2:4E:CE:54:91:B9:2A:BE:4F:18:63:31:30:A9:AE:2A:47:F7:50
X509v3 Authority Key Identifier:
keyid:88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:4c:8b:72:5e:c5:78:c8:93:aa:af:63:75:ee:48:ba:5e:d3:
dd:a9:b6:69:ba:ad:ff:d8:96:7c:3c:43:b3:40:fb:17:88:e4:
a8:8b:72:89:9a:c8:78:b6:95:8c:b7:d9:3b:fa:f1:1a:a1:19:
f7:3f:7e:ce:fd:9d:35:fc:b8:bf:01:df:8d:de:bf:40:29:52:
ab:44:6d:d9:e4:11:f7:fc:bb:2d:32:ae:42:87:0c:8f:1c:70:
33:1f:60:6c:e5:a7:c1:a9:53:4c:90:df:61:c2:a4:f1:5d:f3:
45:2c:c3:8f:f7:c2:15:0d:84:19:c4:93:b5:cd:f6:cf:89:fe:
66:8f:5e:8c:f8:ef:d3:e1:bc:44:e8:77:a9:45:6f:92:6a:e5:
71:95:28:35:d5:17:5d:63:c9:9f:1e:78:db:96:68:35:b7:bd:
16:9f:11:e2:09:8d:56:3e:3b:e2:86:14:04:74:8a:2f:8e:f0:
11:e4:7e:41:c7:e5:2a:7b:24:81:5e:e4:7a:67:1a:bb:12:90:
90:0e:8e:1a:ee:bc:ad:af:b6:04:50:90:c8:74:b4:07:89:a3:
c2:c3:94:8c:d4:d9:b4:76:6e:16:be:7c:0f:93:23:d8:a6:98:
86:71:5f:d2:8a:d7:75:93:8a:78:d1:d6:0c:4f:9b:bb:b4:81:
32:d9:8d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:07:24 2025 by rpki-client